Your Coding Agent Reads .env, And .gitignore Was Never The Control
A dev.to writeup makes a point worth stealing: the secret leaves your machine in a prompt, not a commit. The proposed fix is a local proxy that masks values before egress.
Reality
- Evidence32
- Adoption
- Insufficient
- Hype gap+12
- Incentives72
- Confidence40